Ask the Community
Groups
Backup failed - This implementation is not part of the Windows Platform FIPS validated cryptographic algorithms - Connect IT Community | Kaseya
<main> <article class="userContent"> <h3 data-id="problem">Problem</h3> <p>This error is logged when attempting backup from Kaseya: -</p> <blockquote class="blockquote"> <p>Backup failed - Backup process could not start because of the following error: This implementation is not part of the Windows Platform FIPS validated cryptographic algorithms. at System.Security.Cryptography.SHA256Managed..ctor() <br>at SHAHashing.SHAHashing.CalculateSHA256(String text) <br>at SHAHashing.SHAHashing.HashAndUnmask(String encryptedText, String keyMaskString) <br>at KaseyaBackupCmd.KaseyaBackupCmd.GetUnmaskedPassword(String user, String coverPass, VSAEncryptionAlgorithm encryptionType) <br>at KaseyaBackupCmd.KaseyaBackupCmd.DetermineNetworkPasswordToUse(String user, String coverPass, VSAEncryptionAlgorithm encryptionType, String acronisEncryptPath, String kaseyaTempDirectory, String& passwordToUse, NetworkPasswordType& passwordType) <br>at KaseyaBackupCmd.KaseyaBackupCmd.RunVolumeBackup() <br>at KaseyaBackupCmd.Program.Run(String[] args)</p> </blockquote> <p> </p> <h3 data-id="cause">Cause</h3> <p>The Windows environment is configured to use FIPS encryption, which conflicts with encryption of agent credentials when running backups.</p> <h3 data-id="solution">Solution</h3> <p>Disable FIPS compliant encryption policy in Windows on the Backup agent machine: -</p> <p>1) Go to <em>Start > Control Panel > Administrative tools > Local Security Policy</em>. The Group Policy dialog appears. <br>2) Under the <em>"Local Policies"</em> heading, select <em>"Security Options"</em> and look for the entry, <em>"System cryptography: Use FIPS compliant algorithms for encryption, hashing, and signing." </em><br>3) If this entry is enabled, <strong>disable</strong> it.</p> <p><em><strong>Also check if similar policy is applied at domain level. If so, disable it there too.</strong></em></p> <p>4) open the registry editor and browse to the following path. Make sure this registry subkey is set to 1:</p> <blockquote class="blockquote"> <p>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\fipsalgorithmpolicy</p> </blockquote> <h3 data-id="applies-to">Applies to</h3> <p>Kaseya VSA (Backup module) - v6.5 and later</p> </article> </main>